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We present a polymorphic type system for lambda calculus ensuring that well-typed programs can 
be executed in polynomial space: dual light affine logic with booleans (DLALb). To build DLALb we 
start from DLAL (which has a simple type language with a linear and an intuitionistic type arrow, as 
well as one modality) which characterizes FPTIME functions. In order to extend its expressiveness 
we add two boolean constants and a conditional constructor in the same way as with the system STAb 
in Q. 

We show that the value of a well-typed term can be computed by an alternating machine in 
polynomial time, thus such a term represents a program of PSPACE (given that PSPACE = APTIME 
(0)). 

We also prove that all polynomial space decision functions can be represented in DLALb- 
Therefore DLALb characterizes PSPACE predicates. 

1 Introduction 

The topic of this paper is Implicit Computational Complexity which is the field of study of calculi and 
languages with intrisic complexity-theoretical properties. One of the main issues of this field is to design 
programing languages with bounded computational complexity. Historically, there have been various 
approaches: 

• restriction of recursive schemes (O, lfT2l ") 

• interpretation methods for first order interpretational languages ( |[T3ll . (3) 

• variations of linear logic and proofs- as-programs Curry-Howard correspondence ((H, ICQ and ifTTTO 

The latest approach has led to the design of type systems for A -calculus such that the set of all 
well-typed terms corresponds to the class PTIME. 

In this paper, we will present a type assignment system which guarantees that a program of the 
language is PSPACE and that all predicates of PSPACE can be encoded in this language. 

Coming back to the approach of linear logic, it is based on the observation that the duplication rule 
is controlled by the logical connective "!". Moreover, the power of duplication is responsible for the 
complexity of normalization. Thus, by replacing the "!" with a weaker connective, one obtains systems 
with controlled duplications, and where normalization offers a complexity bound. Light Linear Logic 
(LLL, [8]) and Soft Linear Logic (SLL, [IT]) are two examples of such systems. 

First, the system DLAL ([2] and [3]) has been derived from LLL and then the system ST A ([6]) from 
SLL. These systems are both characterizing PTIME. Then, in order to characterize PSPACE predicates, 
Gaboardi and al. have designed the system STAb ([7 ]) by adding two boolean constants and a conditional 
constructor to the system ST A. The goal of this paper is to see if it is possible to adapt this method in 
order to obtain a system characterizing PSPACE by modifying the system DLAL. 

It is straightforward to define DLALb starting from DLAL in an analogous way of STAb is defined 
from ST A. However, proving that the complexity bound of this system is polynomial is not obvious. In 
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fact, one difficulty is that the complexity bound of LLL and DLAL is proved by using a specific reduction 
strategy (level-by-level strategy) which is not compatible with the conditional we add to the language. 
Thus we will introduce an abstract alternating machine and a measure on the terms in order to prove the 
PSPACE bound. Thus we use the fact that PSPACE = APTIME (0) both in the completeness and the 
soundness parts of the proof (contrary to the proof that STAb characterizes the predicates of PSPACE 
where PSPACE = APTIME is only used for the completeness). 

The paper is organized as follows. We first give the definition of the system DLALb and some 
properties of this system in Section 2. Then in Section 3 we give the proof that any well-typed term 
represents a predicate of APTIME. Finally, in Section 4 we prove that any predicate of APTIME is 
represented by a well-typed term. 

2 A -calculus with booleans and type assignment 

In this section, we will first define DLALb, then we will give some classical properties which are true for 
terms well-typed in DLALb- 

2.1 Definition of A# and DLALb 

We start from the A -calculus of DLAL and will extend it with booleans and a conditional constructor in 
order to obtain DLALb (analogous to Q). 

The language J^dlaLb of DLALb types is given by: 

A,B ::= a \ A B \ A => B | §A | Va.A | Bool. 

DLALb can be seen as a refinement of System F ensuring some complexity properties. 
The language A# of A -terms with booleans is given by: 

t,u,v ::= x | F \ T \ Xx.t \tu\ift then u else v. 

The terms of A# admit another type of reduction than the j3 -reduction, the c> -reduction which is the 
contextual closure of: 

(if T then u else v) — > u 
and 

(if F then u else v) — > v. 

Definition 1 A term t of Kb can be written in a unique way as M = NqN\ ... N m with m G N and (Nq=x 

or No = Xx.t or No = if Mo then Mi else M 2 ). 

The terms N are called elements of the canonical composition. 

In order to prove the complexity bound, we have to adapt the classical notion of number of occurences 
in such a way that it is compatible with the additive rule (B e) of DLALb (defined in Figure [T]). 

Definition 2 The number of occurences of a variable in a term is inductively defined on the structure 
of the terms as follows: no(x,x) = 1, no(x,y) = 0, no(x,F) = 0, no(x,T) = 0, no(x,Xy.t) = no(x,t), 
no(x,Xx.t) = no(x,t), no(x,t u) = no(x,t) +no(x,u), no(x,if to then t\ else tj) = maxno(x,tj). 
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;x:Ahx:A (M) 

F;A,x:Aht:B ri;Ai hf :A -ofl r 2 ;A 2 h M :A / 

(-° J ) F F~T~a a l. ... 5 (-° e) 



r;AhAii:A^B v y ri,r 2 ;Ai,A 2 h f m : B 
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r i; AihnA ...... :A,x 2 :A,r ; Ahf :B 

(Weak) — — j-- : — ; — - (Cntr) 



ri,r 2 ;Ai,A 2 \-t : A x : A,T; A h ?[x/xi,x/x 2 ] : B 

;r,Ah?:A ri;Aihw:§A r 2 ;x : §A, A 2 h ? : B r& 

(§ ^ ^ . — A i r /i „ (§ e) 



r;§Ahf:§A vs y T u T 2 'MM^t[u/x]:B 

r;Ah,:A (Vi)(«) 



T;Ah?:Va.A v /w T;AH?:A[B/a] 

( fl o i) D „„, (Si i) 

(Be) 



; h F : Boo/ v u ' ;\- T : Bool 

r;A h Mo : §"Boo/ T; Ah Mi: A T;AhM 2 :A «GN 



T; A h j/ M ?/i<?« Mi e/re M 2 : A 



Figure 1 : Natural deduction system for DLALb 



Examples: no(x, (if x then x else xy) y) = 1 
no(y, (if x then x else xy) y) = 1. 

For DLALb typing we will handle judgements of the form T; A h f : A (and r hp t : A for System 
F). The intended meaning is that variables in A are (affine) linear, that is to say that they have at most 
one occurrence in the term, while variables in T are non-linear. We give the typing rules as a natural 
deduction system: see Figure [T] (the rules of DLALb are those of DLAL plus (Bo i)> (Bi i) and (B e)). 

We have: 

• for (V i): (*) a does not appear free in T, A. 

• in the (=> e) rule the r.h.s. premise can also be of the form ; h u : A (u has no free variable). 

Definition 3 The depth of a DLALb derivation S> is the maximal number of premises of (§/) and r.h.s. 
premises of(=> e) in a branch of St. 

Definition 4 The l.h.s. premises of (— o e), (=> e) and (§e) as well as the unique premise of (Ve) are 
called major premises. A DLALsderivation is \/§-normal if: 

• no conclusion of a (V/) rule is the premise of a (Ve) rule; 

• no conclusion of a (§/) rule is the major premise of a (§e) rule; 

• no conclusion of (Weak), (Cntr) and (§e) is the major premise of elimination rules: (— o e), (=> e), 
(§e) and (ye). 

Definition 5 Let 8 -reduction be the reduction defined by: 
Let to be a closed term. 
Let C be a context. 
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C[if to then t\ else ti\ — >• to 
C[i/ ?o ^Aew ^i c/je fa] — C[?i] 
C[if to then t\ else t%\ — > C[?2] 

Examples: 

{Xx-iif (Xz-Z F) then (x u) else y) v) — > (Xz.z F) 
(Xx.(if {Xz-Z F) then (x u) else y) v) — > «)) v) 

{Xx.{if {Xz.z F) then (x u) else y) v) — > ((Ax.y) v). 

2.2 Properties of DLALb 

The contraction rule (Cntr) is used only on variables on the l.h.s. of the semi-colon. It is then straightfor- 
ward to check the following statements: 

Lemma 1 ( Free Variable Lemma ) 

• IfT;A \-f.A then FV(t) C dom(T) U dom(A) 

• 7/T;A h t : A, A' C A, P C T a«d FV(» C dom(V) Udom(A') then T';A' \~t:A 

• 7/T; A h f : A awcf x G A then we have no(x,t) ^ 1 
We can make the following remarks on DLALb rules: 

• Initially the variables are linear (rule (Id)); to convert a linear variable into a non-linear one we can 
use the (§ i) rule. Note that it adds a § to the type of the result and that the variables that remain 
linear get a § type too. 

• the (— o i) (resp. (=> i)) rule corresponds to abstraction on a linear variable (resp. non-linear 
variable); 

• observe (=> e): a term of type A B can only be applied to a term u with at most one occurrence 
of free variable. 

Theorem 1 ( Subject Reduction ) 
Let -A= (A U A) 

SB 

IfT; A h t :A is derivable and t — > v, then T; A h v : A. 

IfV;A h t :Ais derivable and t — > v, then T; A h v : A or T;A h v : §"Bool. 

Proof. 

Almost the same as in |f2l. 

In order to prove the strong normalisation of the terms well- typed in DLALb, we will prove that such 
terms can be translated into terms of System F (which has the property of strong normalisation). 

Definition 6 The translation ()* of a DLALb type in a tyP e of System F is inductively defined on the 
structure of the types as follows: (a)* = a, (A—° B)* = (A)* -> (B)*, (A => B)* = (A)* -»■ (B)*, (§A)* = 
(A)*, (VaA)* = Va.(A)*, (Boo/)* = Va.a -»■ a a. 

Definition 7 The translation ()* of a term of Ab in a term of A is inductively defined on the structure of 
the terms as follows: (x)* = x, (F)* = Xx.Xy.y, (T)* = Xx.Xyx, (Xx.t)* = Xx.(t)*, (t u)* = (t)* (a)*, 
(if t then u else v)* = (t)* (u)* (v)*. 
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Lemma 2 IfT;A \-f.A then (T)*, (A)* h F (*)* : (A)*. 

Proof. By induction on the structure of the type derivation of t. 

Lemma 3 Lett and t' be two terms of Ag such thatF;A\- 1 :Aand t -^>?' then: (t)* A- (t')*, (T)*, (A)* \~f 
(t)* : (A)* and (T)*, (A)* h F (t r )* : (A)*. 

Proof. By the definition of the translation of the terms, Lemma [2] and Theorem [T] 
Theorem 2 ( Strong Normalisation ) 

Let t be a term of Kg, ifT;A h t :A then t is strongly normalizable. 

Proof. By Lemma [3] and the property of strong normalization of terms typeable in System F. 
Theorem 3 (Confluence) 

The 8 /3 -reduction is confluent on the terms ofAg typeable in DLALb- 
Proof. By Theorem[2]and the local confluence of the 5/3-reduction on Ag. 
Theorem 4 (Normal Form) 

Let t be a term of Ag, ifT\A h t : A then t has a unique normal form (denoted Norm(t)). 
Proof. By Theorems [2] and [3] 
Lemma 4 If;\~t: §"Bool then: 

1. t is not an abstraction 

2. ift is normal for the fid-reduction then t = T or t = F. 
Proof. 

1. By induction on the structure of derivations. 

2. By induction on the structure of terms and (i). 
2.3 Stratified terms 

We have to describe the size of a term in detail in order to better control it during /3- and c) -reduction. 

Definition 8 A stratified term is a term with each abstraction symbol X annotated by a natural number 
k ( called its depth ) and also possibly by symbol !, and with applications possibly annotated by !. 

Thus an abstraction looks like X k x.t or X k -x.t and an application like t u or t ! u. When t is a stratified 
term, t[+l] denotes t with the depths of all abstraction subterms increased by 1. The type assignment 
rules for stratified terms are obtained by modifying some of the rules of DLALb as follows: 
F;A,x:Aht :B . F,x : A;Ah t : B 

(-° ~ ■ , . n. ; — ~ (=*• 



T;Ah X°x.t :A B T; A h X 0] x.t : A => B 

F;A \-t:A=>B ;z.:Chu:A ;T,A h f : A 

T,z:C;A\-t\u[+l]:B ( ^ e) T;§A h t[+l] : §A (§ 

The depth of a term is the maximal depth of all the abstractions it contains. 

Lemma 5 Given a DLALb derivation S 1 ofT; A h t : A of depth d, t can be decorated as a stratified term 
t' of depth d such that T; A h t' : A. 
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Proof. By induction on the structure of the derivation 3/. 

We can see that V§ -Normalisation Lemma, Abstraction Property Lemma, Paragraph Property Lemma 
and Subject Reduction Theorem hold for stratified terms as well (as in 0). 

Definition 9 The number of occurences of symbols X at depth k in a stratified term is inductively defined 
on the structure of the terms as follows: no(k,x) = 0, no(k,F) = 0, no(k, T) = 0, no(k,X k x.t) = no(k,t) + 
1, no(k,X p x.t) = no(k,t), no(k,t u) = no(k,t) +no(k,u), no(k,if to then t\ else t%) = max«o(fc,?,). The 

i 

definition of the number of occurences of if in a term t, no(if,t), is similar. 

Lemma 6 Let t be a stratified term such that T\ A h t :A is derivable. If (v ! u) is a subterm oft then: 

• (FV(u)=9) 
or 

(FV(u) = {x} and (x € Dom(T) or x is bound in t by a X annotated by !) and 
no(x,u) = 1) 

• ifv = X k 'x.r then \/p < k, no(p,u) = 

Proof. By induction on the structure of the derivation and Lemma[T] 

We can now define, with the notations on a stratified term, a vector of integers which characterizes 
the size of the term. 

Definition 10 Let t be a stratified term, 

we define vectj(t) = (no(0,t), no(d,t), no(if,t)). 

Definition 11 Let a and b be two vectors of7LP , we define: 

• a <b if and only ifVk <p^a^< b^; 

• a < b if and only if a < b and a^b. 

Lemma 7 Ift and u are two stratified terms such that 
r = no(x,t), a = vect^t) and b = vect^iu), then 
vect d (t[u/x}) <a + r*b = (a + r*b , a d+i +r*b d+ y). 

Proof. By induction on the structure of the term t. 

3 APTIME Soundness 

Usually, a complexity bound for LLL and related systems like DIAL is obtained from a specific reduction 
strategy: the level by level strategy. Such strategy consists to reduce first redexes at level then redexes at 
level 1 and so on. However, it is not possible to apply such strategy in the A -calculus with the conditional 
constructor without breaking the polynomial bound. This is why like Gaboardi and al. we consider a X- 
calculus machine to reduce the terms. A delicate point however is that previous work on LLL and DIAL 
does not provide complexity bounds on A-calculus machines. Thus, we need to introduce a suitable 
measure in order to prove this complexity bound. 
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3.1 Definitions 
Definition 12 (Programs) 

A program is a term t ofAg such that ; h t : §"Bool. 
We define the relation <— by: 

• If{Norm(t) = F) then (no t); 

• If(Norm(t) = T) then (yes <- t). 

Definition 13 (Contexts) 

• A context s/ is a sequence of variable assignments of the shape Xj := ti where all variables X[ are 
distinct. The set of contexts is denoted by C tx - 

• The cardinality of a context s/, denoted by #(s/), is the number of variable assignments in s/. 

• The empty context is denoted by 0. 

• Let s/= [x\ := t\, x n := t„] be a context. Then Q** : Ag — > Ag is the map that associates the 
term t[t n /x n ]...[t\ /x\] to each term t. 

Definition 14 (Configurations) 
There is 4 types of configurations: 

• a rejecting configuration: {(Rejecting)}; 

• an accepting configuration: {(Accepting)}; 

• an existensial configuration: [[(3) s/ \ {b; t}} with s/ a context, t a term and b G {yes;no}; 

• a universal configuration: [[(V) s/ \ {b; t} {b'\ t'}} with sf a context, t and t' two terms and 
b,b' £ {yes;no}; 

Definition 15 The Abstract Alternating Machine J^g (which is similar to the Krivine machine ( MOV ) 
when restricted to the X-calculus) is a machine that takes as input a program t, starts with the initial 
configuration [[(3) | {yes; ?}] and reduces t using the two transition functions described in Figure^ It 
accepts the program t if its normal form is true and rejects it if its normal form is false (as will be shown 
below). 

The base cases are obvious. The (j8) transition applies when the head of the subject is a j6-redex. 
Then the association between the bound variable and the argument is remembered in context sf. The (h) 
transition replaces the head occurence of the head variable by the term associated with it in the context. 
The (if) transitions, always followed by the (if) transitions, perform the 8 reductions (following the 
intuition that: if to then t\ else tj = (to At\) V (->to A^))- 

Definition 16 (Computations) 

The computation of the Abstract alternating machine is the tree obtained by applying the rules given 
in figure^starting from the initial configuration. The definition of a configuration accepted by and 
of a computation accepted by Jffag is the same as those of the Alternating Turing Machine. 



From here until the end of the subsection 3.3 we will fix a program M. Note that: 

• m =\M\ (with \M\ the size of M); 

• S> is a derivation of ; h M : §"Bool; 

• d is the depth of Q>\ 
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1/2 

[(3) si | {b; Xx.N N\ ... N p }} -y> [(3) si@(x' :=Ni) \ {b; N[x' /x] N 2 ... N p }}(*) 

1/2 

[(3) si x @(x:=N)@si 2 I {b;xNi ...N p }\ > [(3) s/\ ® (x := N) @si 2 \ {b; N N[ ...N p }} 

(h) 
1 

[(3) si | {b; (if M then M\ else M 2 ) N, ... N p }} > [(V) si \ {yes; M } {b; Mi Ni ... N P }J 

(if) 
2 

[(3) si | {b; (if M then M { else M 2 ) Nt ■■■ N p }} > [(V) si \ {no; M Q } {b; M 2 N\ ... N p }} 

(if) 

[(V) si | {a; Mo} {b; N}} > [(3) si \ {a; M }J 

(if) 

[(V) si | {a; Mo} {b; N}\ > [(3) si \ {b; N}} 

(if) 

base [(3) si | {yes; T}} ^\ {(Accepting)} [(3) si | {no; F}} peeing)] 
Cases [(3) «f | {no; T}} % {(Rejecting)} [(3) si \ {yes; F}\ ^ {(Rejecting)} 
(*) x' is a fresh variable. 1/2 means 1 or 2. 

Figure 2: The Rules of the Abstract Alternating Machine Jtfgg 

• M' is the stratified term of depth d associated with the term M; 

• r = max«o(x,M) (with r < m by definition). 

X 

Definition 17 Lett k , u k , v k : Z d+2 -)■ Z rf+2 smc/j f/zaf: 

• t k (a) = (a , a k _ u a k -l, a k+l +r(b k+l +m), a d+i +r(b d+i +m)); 

• «/t(«) = («o, fl/t-i, — 1, «<Z+l)>' 

• Vjfc(fe) = (b , b k , b k+i +m, b d+ \ +m). 

We want to establish a complexity bound on the machine. For that, we define a measure on the 
vectors characterizing the size of terms such that this measure will decrease with /3- and c> -reduction. 

Definition 18 Let measure^ : Z I+2 x Z ,+2 — > Z such that: 

• measure ^^(ao, bo) = ao 

• measure (,- +1 )((a , a ;+2 ), Oo, ^+2)) = 

measure (^((ai + (r+ l)(&i +a *'«)fl , o 5 «i+2 + (r + 1 ) (^,+2 + «o *m)ao), 
(bi+a *m, b i+2 + ao*m)). 

Lemma 8 Vfc > — 1, \/a,b,a' ,b' G N k+2 , 

if a 1 <a and b 1 < b then measure ( k )(a' , b') < measure^(a, b); 

if a' <a, b' <b and a' 7^ a then measure ( k )(a' , b') < measure^ (a, b). 

Proof. By definition of measure. 

Lemma 9 Leta,b£ W l+2 . 

• G [0; d], if t k (a),v k (b) G N rf+2 f/jerc < measure ( d )(t k (a), v k (b)) < measure^ (a, b); 

• G [0; d+ lj, £/ w;i(a) G N rf+2 f/ien < measure ^(u k (a), b) < measure^(a, b). 
Proof. By Lemma[8]and definitions of measure, t, u and v. 
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[(i+1) :=M) 1 N[x\/x] N 2 ...N p ) (t k (a), v k (b))j 

l(i)(^\(k k, X .NlN l )...N p )(a,b)} KP-) 

1) (af@(xi ■~N 1 ) | N[x,/x] N 2 ... N„) (u k (a), b)} 



{si | X k x.NN\ ...N p ) (a, b)j 
1(0 {srf x @{x:=N)@ef 2 \NNi ...N p ) (a. 



(J3) 



I(i) (^i@(A::=i\r)@^2 \xN\ ...N p ) {a, 
l(i) K I Mo) (u d+l (a), b)j {si | Mi N ...N„) {u i+ i{a), b)\ [(«) | M 2 AT, ...Ay (w rf+1 (a), 6)] 



{si | (// M then Mi else M 2 ) Ni ... N p ) {a 
[(0) (0 | M') ((«, »), (0, 0))] 



(h) 

(if) 



(root) 



Figure 3: The Rules of the Transformation Tree of M: 3F(M) 

Definition 19 The Transformation Tree ofM, ^"(M), describes the computation tree of J(faj on the input 
M and contains nodes which are elements of the set N x (Ctx x Ag) x (N rf+2 x N rf+2 ). This tree is 
inductively defined by the rules given in Figure [3] Note that the terms in this tree are decorated ( these 
terms are stratified terms). 

3?{M) will be used to bound the time of computation of J^<% on M. 



3.2 APTIME soundness of 

Lemma 10 Let (£?\t), (a, b)j be a node of 3"(M). 

1. for each (x\ := t t ) £ gf, vect d ((ti)^) < b. 

2. vect d {(tY) < a. 

Proof. 

1. By induction on the structure of the tree using Lemmas [6] and [7] 

2. By induction on the structure of the tree using (1) and Lemma|7] 

(given that all the elements of the canonical composition of t and all the terms of $4 are subterms 
ofM). 

Lemma 11 Letn = \(j), (ff\t), (a, b)j andn' = [(/), {^'\t'), (a', b')j be two nodes of ST{M). Ifn' 
is a son ofn linked by a rule (j3!), (j8) or (if), then < measure ( d )(d \ b') < measure t d \ (a, b). 

Proof. By Lemma 10 we have a,b,a',b' G N d+2 , thus by Lemma g we have < measure r d \ (a 1 , b' 
measure( d \(a, b). 



< 



Definition 20 Let nbe a node of £T(M). 

• #a\(n) denotes the number of applications of the (j8 !) rule in the path between the root of ,^(M) 
and n. 

• #p(n) denotes the number of applications of the (j3) rule in the path between the root of 3*(M) 
and n. 
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• #/,(«) denotes the number of applications of the (h) rule in the path between the root of 3?(M) and 
n. 

• #jf(n) denotes the number of applications of the (if) rule in the path between the root of SF(M) 
and n. 

Lemma 12 Let nbe a node of 2?(M). 

1. #j3i(n) +#p(n) +#if(n) < measure ^((m, m), (0, 0)) 

2. #h(n) < (measure ^((m, m), (0, 0))) 2 

Proof. 

1. By Lemma 1 1 

2. Let n' and n" two nodes of 3F(M) such that there is a path of applications of the (h) rule from n' 
to n". 

%(»")- # fc (n') <#(^ n >)=#fsi(n')+#fs(n'). 

Thus #„(n) < (fy,(n) * (#pi(n) +# j3 (n) + #//(«)). 

Lemma 13 Vf G [1; rf+1], 

measure^)((m, ...,m), (0, ...,0)) < measure^_i-j((m y+ /»' ), (ra 3 ' +1 , ...,m 3 ' +1 )). 

Proof. By induction on z using Lemma[8] 

Theorem 5 77je machine Jf^ on the input M is computing in a time bounded by m^ M . 

Proof. By Lemmajlij measure ^((m, m), (0, 0)) < m 3</+ \ 
Furthermore by Lemma [T2| let n be a node of 3T(M), 

let k = measure u\((m, m), (0, 0)) and let p n = #p\(n) +#p(n) + #;/(«) +#/,(«), 
p„ <k + k 2 . 

Thus Time(je<%(M)) <2*Depth(,^(M)) + 1 = 2* (maxp„) + 1 <2*(m 3 " +2 + m 2 * 3<,+2 ) + 1. 

Note that the measure we have defined can be applied in the restricted case of DIAL programs: in 
this case the machine is deterministic and our measure gives a new proof that DLAL terms of boolean 
type can be evaluated in polynomial time where the degree of the polynomial depends on the depth of 
the term. 

3.3 Correctness of 

Now, we need to prove that the alternating A -calculus machine computes the right value. 

Lemma 14 srf \ {b; t}J (resp. [(V) si \ {b; t} \b'\ t'}J) is a configuration of the computation of 

je^onM then ;h (t)* : §"Bool (resp. ;h (t)* : §"Bool and ;h (t')^ : §"Bool). 

Proof. By induction on the structure of the tree using Theorem [T] 

Lemma 15 If c = [[(3) \ {b; t}J (resp. [[(V) ff/ \ {b; t} {b'\ t'}J) is a configuration of the computation 
of Jt^ on M then Jtfog is accepting c if and only ifb <— (f)** (resp. b <— (t)^ and b' <— (t')^ ). 

Proof. By induction on the tree, starting from the leafs and using Lemmas [T4| and |4") 

Theorem 6 The machine is accepting M if and only ifNorm(M) = T. 
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ri;Aihfi:Ai r 2 ; A 2 h f 2 : A 2 
ri,r 2 ;Ai,A 2 l-fi®fe:Ai®A2 

n;Ai h w : A\ ®A 2 T 2 ;x\ : Ai,x 2 : A 2 , A 2 h ? : B 
ri,r 2 ;Ai,A 2 h let u be x\ <g>x 2 in t : S 



Figure 4: Derived rules 



Proof. By Lemma 15 



If t is a closed term of type W => §"Bool, we define jSf (f) as the set of words accepted by t. Finally, 
we obtain the desired result: 

Theorem 7 (APTIME soundness of DLAL B ) Let t be a term of A B such that ;h t : W => §"Bool or 

;h £ : W — o §"Bool /ias a derivation of depth d. 

Let ^# &e f/ie Alternating Turing Machine which, on the input i represented by the X-term w, simulates 
the machine on the input (t w). 

Then j$ decides the language represented by t and ^# is computing in time 0{m' i ). 
Thus Sf(t)e APTIME. 

Proof. By Theorems [6] and [5] 



4 APTIME Completeness 

This section presents the second part of the proof that DLALb characterizes the predicates of PSPACE 
and is simply using classical ideas of the literature (see [3] and IP71D. 

We have the following data types for unary integers and binary words in DLALb'. 

N = Va.(a^a)=>§(a^ct), 

W = Va.(a a) => (a — o a) => §(a — o a). 

The inhabitants of types N and W are the familiar Church codings of integers and words: 

n = Xf.Xx. /(/... (fx)... ), 

S v ' 

n 

w = Xf .Xfi .Xx.fi, (fh ■ ■ ■ (A x ) ■■■), 

with i £ {0, 1}, n £ N and w = i\i 2 ■ - in & {0, 1}*. 

It can be useful in practice to use a type A (8) B. It can be defined anyway, thanks to full weakening: 

A<g>fi = Va.((A^fi^a) -o a). 
We use as syntactic sugar the following new constructions on terms with the typing rules of Figure 

m 

t\®t 2 = Xx.Xt[t 2 , 

let u be x\®x 2 in t = u(Xx\.Xx 2 .t). 
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Theorem 8 (APTIME completeness of DLALb) If a function f : {0, 1}* — > {0, 1} is computable in time 

ryd 

n by a one-tape alternating Turing machine for some d, then there exists a term M of Ag such that 
;hM:W=J> § 2J+2 Bool and M represents f. 

Proof (Sketch). Let M be an ATM with 2 symbols, 1 tape, k classical states and four characteristic 
states. The four characteristic states: Accepting, Rejecting, Universal and Existential, are represented 
respectively by A = F ® T, R = F ® F, A = T (g) F and V = T <g) T of type Bool 2 . 
Following the idea of CD, let Conf be the DLALg-type 

Va.(a^a) => (a-oa) =>• §((a^a) 2 (g)(Bool* : (g)Bool 2 )), 

which serves as a type for the configurations of the ATM. 
We will proceed in the same way as Gaboardi et al.: 

• show that all polynomials can be represented in the system; 

• define a function Step which answers recursively if a configuration will be accepted or not by the 
ATM, it will be given the type: 

(Conf -o Bool 2 ) -o (Conf -o Bool 2 ); 

• define a term which decides if a given configuration is accepted, by iterating Step a polynomial 
number of times. 

We have the following DLAL^-terms: 

• transi (resp. trans2) : Conf — o Conf for one-step of the first (resp. the second) function of transi- 
tion of the ATM (similar to trans in El): 

• Kind : Conf — o Bool 2 for the projection from a configuration to its characteristic state; 

• P : N — o § 2d N for the polynomial n i-> n ld (same as P in 0). 

The term Step (of type (Conf — o Bool 2 ) — ° (Conf — o Bool 2 )) is defined in a way analogous to Step 
in El: 

• Terrri3 = if %2 (h (transi c)) then F ® (712 (h (trans2 c))) else R; 

• Terrri2 = if %2 (h (transi c)) then A else F [%i (h (trans2 c))); 

• Termi = if 712 (Kind c) then Term2 else Terni3; 

• Step = Xh.Xc.if %\ (Kind c) then Termi else Kind c. 
Step term operation: 

• If Step receives as argument a configuration c and a function of characterization h of type Conf — o 
Bool 2 such that h (transi c) (resp. h (trans2 c) returns A if transi c is accepted by the ATM and 
R if it is rejected (resp. A if trans2 c is accepted by the ATM and R if it is rejected) then Step h c 
returns A if c is accepted by the ATM and R if it is rejected; 

• Termi represents the case where the characteristic state of c is neither Accepting nor Rejecting (in 
which cases it is sufficient to return Kind c); 

• Terrri2 (resp. Terni3) represents the case where the characteristic state of c is Existential (resp. 
Universal). 

We also have the following DLALfi-terms: 

• init : W — o Conf for initialization (similar to init in [2]); 
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Let A = h: Conf -o Bool 2 , c : Conf 



(id) 



; I- *fc:Va.V0.(a8> /()-•/( „_ :h trans, : Conf -o Conf ; c : Conf h c : Conf 

(Ve) " 7 (M) (^,e) 

: V/3.(Bool(S/j) -o ;/i : Conf -o Bool 2 r- A : Conf -o Bool 2 ;c : Conf h trans! c : Conf 

(Vc) (^>e) 

;r- % 2 : Bool 2 -« Bool ;Ah (* (transi c)) : Bool 2 

(-°e) 



;Ah^ (h (trans, c)) : Bool 



(Bo i) 



;hf: Bool ; A I- n z {h (trans 2 c)) : Bool 

» (® i) 

;AhF(g)(7r2 (/z (trans 2 c))) : BooP 

;Ah 7t 2 (A (transi c)) : Bool ; Ah A: Bool 2 ;A h F <g> (n 2 (h (trans 2 c))) : Bool 2 
;A h if %2 (h (transi c)) then A else F ® (%2 (h (trans 2 c))) : Bool 2 

Figure 5: Type derivation for the term Terrri2 



(B e) 



• length : W — ° N for the length map (similar to length in 10); 

• coer : W — ° § M W for an identity function (usefull for the typing and similar to coer in Q). 

Finally we have M : W — o § M+2 Bool which is the term representing the ATM M =Xw.(7l2 (P (length w) Step Kind 
M term operation: 

• in it (coer w)) is a term which represents the initial configuration of the ATM. 

• Step calls itself recursively n 2 '' times (with n, represented by length w, the length of the word 
w) -thanks to the term P (length w)- so that it calls Kind only on configurations which have a 
characteristic state Accepting or Rejecting. Thus the term P (length w) Step Kind (init (coer w)) 
returns A if w is accepted by the ATM and R if it is rejected. 

• Therefore 7r 2 (P (length w) Step Kind (init (coer w))) returns T (true) if w is accepted by the ATM 
and F (false) if it is rejected. Thus M represents 



5 Conclusion and perspectives 

We have presented a polymorphic type system for lambda calculus with booleans which guarantees 
that all well-typed terms are representing APTIME predicates and that all predicates of APTIME are 
represented by well-typed terms. Thus this system is characterizing PSPACE (given that PSPACE = 
APTIME). 

Otherwise, if we were to consider terms of type W §"W instead of terms of type W §"Bool we 
believe that we would obtain a characterization of FPSPACE without changing the type assignment 
system and with the same data type in input and output (which is a property not shared by STAg). 
Now, it would be interesting to see if system DLALb could be modified in order to characterize the 
polynomial hierarchy (PH). We think that such study would be facilitated by the use of APTIME Abstract 
Machine in the Soundness part of the proof of this paper. Thus this proof could be reused to prove the 
PH soundness of the modified system of DLALb- 
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